Spoofing Speaker Verification System by Adversarial Examples Leveraging the Generalized Speaker Difference

Figure 1

The adversary injects a special and slight perturbation into the original utterance, which does not change the waveform but influences the verification result.